Critical DLA-4039-1 3 CVEs

ffmpeg - security update

Published Feb 1, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	ffmpeg	7:4.3.8-0+deb11u2

Vulnerabilities 3

Critical 9.8

CVE-2024-35368

FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c.

ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine

Nov 29, 2024
Critical 9.1

CVE-2024-35367

FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer

ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine

Nov 29, 2024
Medium 6.2

CVE-2024-36618

FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, p…

ffmpeg ffmpeg libav Debian Ubuntu

Nov 29, 2024